aosp12/external/libwebsockets/plugins/deaddrop

Deaddrop: File upload and sharing plugin

Building the plugin

Just configure lws with cmake .. -DLWS_WITH_PLUGINS=1 and build lws as normal.

Configurable settings

pvo name	value meaning
upload-dir	A writeable directory where uploaded files will go
max-size	Maximum individual file size in bytes
basic-auth	Path to basic auth credential file so wss can also be protected

Required mounts

To use deaddrop meaningfully, all the mounts and the ws protocol must be protected by basic auth. And to use basic auth securely, the connection must be protected from snooping by tls.

1. Set the basic-auth pvo to require valid credentials as described above

2. Protect your basic fileserving mount by the same basic auth file... this is used to serve index.html, the css etc.

3. Add a callback mount into "lws-deaddrop" protocol at "upload"... so if your URL for deaddrop is "/tools/share", this would be at "/tools/share/upload". It must also be protected by the basic auth file.

4. Add a fileserving mount at the url "get" (continuing the example above, it would be "/tools/share/get" whose origin matches the "upload-dir" pvo value you selected. This mount needs any additional mimtype mappings since it's where the uploaded files are shared from.

Using with C

See ./minimal-examples/http-server/minimal-example-http-server-deaddrop for how to use the plugin directly with C.

Using with lwsws / lejp-conf

As a plugin, you can configure the mounts and pvos per-vhost easily in JSON.

All the snippets here

The mountpoints would look something like this (added to vhost/mounts)

	{
         "mountpoint": "/tools/share",
         "origin": "file:///var/www/deaddrop",
         "default": "index.html",
         "basic-auth": "/var/www/ba"
        }, {
         "mountpoint": "/tools/share/upload",
         "origin": "callback://lws-deaddrop",
         "basic-auth": "/var/www/ba"
        }, {
         "mountpoint": "/tools/share/get",
         "origin": "file:///var/cache/deaddrop-uploads",
         "basic-auth": "/var/www/ba",

	 "extra-mimetypes": {
		".bin": "application/octet-stream",
		".ttf": "application/x-font-truetype",
		".otf": "application/font-sfnt",
		".zip": "application/zip",
		".webm": "video/webm",
		".romfs": "application/octet-stream",
		".pdf": "application/pdf",
		".odt": "application/vnd.oasis.opendocument.text",
		".tgz": "application/x-gzip",
		".tar.gz": "application/x-gzip"
	  }
	}

This enables the plugin on the vhost, configures the pvos, and makes the wss serving also depend on having a valid basic auth credential.

         "ws-protocols": [{
                  "lws-deaddrop": {
                  "status": "ok",
                  "upload-dir": "/var/cache/deaddrop-uploads",
                  "max-size": "52428800",
                  "basic-auth": "/var/www/ba"
                }
          }],